ARMember Directory Traversal Vulnerability via X-FILENAME Header

A directory traversal vulnerability has been identified in the ARMember plugin for WordPress, affecting all versions through 4.0.27. The vulnerability allows unauthenticated attackers to upload and overwrite certain files, such as CSS files, to directories outside the 'wp-content/uploads/armember' directory. This exploitation is made possible through the 'X-FILENAME' HTTP header.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads and overwriting of files in sensitive directories, potentially allowing for the execution of malicious code or disruption of site functionality.

Remediation

Users are advised to update the ARMember plugin to version 4.0.28 or a newer patched version.